CVE-2020-36233

CVE-2020-36233: vulnerability in Atlassian Bitbucket Server

Published · Updated

Follow this CVE+ Monitor Bitbucket Server+ Monitor Bitbucket Data Center

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.3%
The Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center before version 6.10.9, 7.x before 7.6.4, and from version 7.7.0 before 7.10.1 allows local attackers to escalate privileges because of weak permissions on the installation directory.
Affected products
Atlassian · Bitbucket Data CenterAtlassian · Bitbucket Server
Related CVEs — Atlassian Bitbucket Server

In the same product, most dangerous first.

CVE-2026-21589CRITICALCVE-2026-21589EPSS 99.7%KEVCVE-2022-36804HIGHCVE-2022-36804EPSS 99.1%KEVCVE-2022-43781CRITICALCVE-2022-43781EPSS 98.0%CVE-2022-26133CRITICALCVE-2022-26133EPSS 70.6%CVE-2023-22513HIGHCVE-2023-22513EPSS 15.3%CVE-2019-15000—CVE-2019-15000EPSS 7.8%